CVE-2024-26762

A flaw was found in the Linux kernel's Compute Express Link (CXL) subsystem. This vulnerability allows a local user or hardware error event to cause a Denial of Service (DoS) by crashing the system. When handling error reporting for a detached CXL memory device, the driver attempts to access unmapped device registers without verifying that the device remains connected. This invalid memory access triggers a kernel page fault, resulting in a system crash.

This vulnerability is rated as Low impact because exploitation depends on the presence of specialized Compute Express Link hardware undergoing an uncommon device detachment during an error event. Typical Red Hat environments are not exposed to this issue unless utilizing dedicated CXL memory devices. Additionally, Red Hat Enterprise Linux is not affected as the problematic code was never introduced into enterprise kernel packages.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.